Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft
File:                     ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft (raw, json)
Hash identifier:          KlBu9DVQSFnCUjs60x9vNOXFT91nck/dDGO4kjrghCQ=
Subject key identifier:   E3:26:F0:69:96:B1:63:B6:3C:10:91:58:AE:C1:42:39:E2:E7:AD:D8
Authority key identifier: 64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8
Certificate issuer:       /CN=A91F5756/serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8
Certificate serial:       B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft
Manifest number:          B2
Signing time:             Tue 23 Jun 2026 07:22:36 +0000
Manifest this update:     Tue 23 Jun 2026 07:22:35 +0000
Manifest next update:     Tue 30 Jun 2026 07:22:35 +0000
Files and hashes:         1: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl (hash: dDXO0KUf5TwXqecX+y3nVk4EigKF+Bj/M6LA4D6x2eQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl
                          rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 07:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5756, serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8
        Validity
            Not Before: Jun 23 07:22:35 2026 GMT
            Not After : Jun 30 07:22:35 2026 GMT
        Subject: CN=6a3a343b-dbe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:35:48:2d:72:a1:b5:31:b9:df:b2:89:df:dd:
                    04:6a:3c:e6:86:c7:cb:d4:6d:ee:49:2b:85:ee:cd:
                    30:9b:60:1c:84:a6:a9:21:77:9d:3b:d6:b7:5d:15:
                    1a:01:f9:17:21:51:ec:0a:9b:6f:fd:e2:22:33:3b:
                    8a:cd:15:b8:4c:39:73:84:35:1e:7f:5c:45:03:56:
                    e0:78:ca:9f:f9:8a:4c:af:62:70:dc:b0:ca:26:c2:
                    f6:04:2c:69:d4:84:ad:9f:83:db:0f:66:90:8b:36:
                    c4:cc:16:75:01:17:20:39:ce:1e:74:ad:9e:32:05:
                    22:7c:33:fa:87:f5:94:70:44:b7:f6:f0:9d:2a:89:
                    1c:db:16:ee:e5:83:40:0d:d6:1c:06:03:af:64:2b:
                    08:3d:48:0f:40:d8:3e:69:9f:8b:7a:a6:98:8a:31:
                    f5:fa:65:a9:5d:e1:82:b0:25:f5:70:39:e1:85:21:
                    ea:e0:c4:26:07:cb:1e:0d:12:7c:3a:c7:28:42:8f:
                    46:d5:7d:fc:62:4e:e5:93:39:86:a3:0c:bd:92:60:
                    c9:74:24:6b:07:6a:0b:07:2f:3b:0a:30:74:ad:0b:
                    74:8e:86:40:71:91:2c:4b:c8:df:0d:b9:b1:4f:ae:
                    91:b4:46:a9:6d:7f:f8:48:d3:2c:e8:81:96:e7:18:
                    5f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:26:F0:69:96:B1:63:B6:3C:10:91:58:AE:C1:42:39:E2:E7:AD:D8
            X509v3 Authority Key Identifier:
                keyid:64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:9a:3e:ec:07:11:7d:1b:71:ca:44:09:b9:2e:87:ea:ef:8e:
         bb:22:a0:02:bd:53:69:38:05:d3:a2:8c:36:0a:60:f2:48:4c:
         60:0d:3e:5f:71:62:bb:f8:ad:73:9c:0d:97:ea:b5:e3:5d:75:
         0a:f3:0a:f8:5f:e1:6f:41:78:ce:93:3f:f1:9e:f7:4d:a5:49:
         92:85:2e:76:8d:cd:73:f0:49:12:c9:d5:27:a4:01:56:b2:95:
         d1:93:5d:64:de:6a:99:95:fb:7a:48:f5:68:76:45:bf:c7:ee:
         fb:b6:e5:04:0e:bf:c4:a2:2a:ee:51:ee:ba:48:e6:26:58:8d:
         d3:64:a7:03:86:f1:f1:7d:59:22:18:f6:81:b8:71:5c:08:60:
         54:bb:5b:05:10:dd:ac:84:a6:cf:03:48:a4:2b:b2:c5:fe:fe:
         83:50:e8:78:8f:80:26:0c:6f:4f:2b:fb:bf:c0:f1:63:58:c3:
         5b:38:50:4b:7e:ea:e5:cb:d6:ee:f6:db:0a:d4:ec:3a:21:b2:
         40:57:bf:21:b1:4c:86:05:0a:9f:45:af:43:1d:b6:fe:83:c7:
         de:aa:db:bf:e2:37:57:4c:db:d5:61:a9:83:fe:40:88:3a:c4:
         4b:5f:0f:f3:05:99:91:e4:19:e5:90:7e:18:c8:8c:29:4a:7a:
         e3:87:4b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:20:38 2026 by rpki-client